Privacy Policy

General information

ChannelHouse GmbH, address (hereinafter or “platform operator”) as the operator of the “World of Feet” platform (hereinafter “platform”) accessible at www.worldoffeet.de, takes the protection of personal data very seriously. We treat personal data confidentially and in accordance with statutory data protection regulations and on the basis of this data protection declaration. The legal basis can be found in particular in the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

If you use this platform, various personal data will be processed depending on the type and extent of use. Personal data is information relating to an identified or identifiable natural person (hereinafter “data subject”); A natural person who can be identified directly or indirectly (e.g. by being assigned to an online identifier) is considered identifiable. This includes information such as name, address, telephone number and date of birth.

This data protection declaration informs you in accordance with Art. 12 ff. GDPR about the handling of your personal data when using our platform. In particular, it explains what data we collect and what we use it for. It also informs you how and for what purpose this happens.

Responsible person

The responsible person is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses). The responsible person within the meaning of the GDPR and the applicable national data protection laws (in particular the BDSG) and other data protection regulations is:

ChannelHouse GmbH
Tel.: 0711 20709466
E-Mail: kontakt@worldoffeet.de

Purposes and legal bases of data processing

1. Accessing and visiting our platform – server log files

For the purpose of the technical provision of the platform, it is necessary for us to process certain information automatically transmitted by your browser so that our platform can be displayed in your browser and you can use the platform. This information is automatically collected each time you access our platform and automatically stored in so-called server log files. These are:

Browsertyp und Browserversion
Operating system used
Platform from which access is made (referrer URL)
Host name of the accessing computer
Date and time of access
IP address of the requesting computer

The storage of the aforementioned access data is necessary for technical reasons in order to provide a functional platform and to ensure system security. This also applies to the storage of your IP address, which is necessary and, under further conditions, can at least theoretically enable an assignment to your person. In addition to the aforementioned purposes, we use server log files exclusively for the needs-based design and optimization of our website purely statistically and without drawing any conclusions about your person. This data is not merged with other data sources, nor is it analyzed for marketing purposes.

The access data collected as part of the use of our platform is only stored for the period for which this data is required to achieve the aforementioned purposes. Your IP address is stored on our web server for a maximum of 7 days for IT security purposes.

If you visit our platform to find out about our range of products and services or to use them, the basis for the temporary storage and processing of access data is Art. 6 para. 1 sentence 1 lit. b GDPR (legal basis), which permits the processing of data for the performance of a contract or for the implementation of pre-contractual measures. In addition, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest here is to be able to provide you with a technically functioning and user-friendly platform and to ensure the security of our systems.

2. Creating a user account (registration) and logging in

When you create a user account or log in, we use your name and e-mail address]) to grant you access to your user account and to manage it (“mandatory information”). This information is required for the conclusion of the user contract. If you do not provide this data, you will not be able to create a user account.

We use the mandatory information to authenticate you when you log in and to follow up on requests to reset your password. We process and use the data you enter when registering or logging in (1) to verify your authorization to manage your user account; (2) to enforce the platform’s terms of use and all associated rights and obligations; and (3) to contact you to send you technical or legal notices, updates, security messages or other messages relating to the management of your user account.

This data processing is justified by the fact that (1) the processing is necessary for the performance of the contract between you as the data subject and us pursuant to Art. 6 para. 1 lit. b) GDPR for the use of the platform, or (2) we have a legitimate interest in ensuring the functionality and error-free operation of the platform, which outweighs your rights and interests in the protection of your personal data within the meaning of Art. 6 para. 1 lit. f) GDPR.

3. Processing of other user data

In addition, we request further data and information voluntarily provided by you (hereinafter “user data”) in order to display suitable content to you or to find and commission suitable providers of content or goods (hereinafter “providers”) for our own advertising campaigns on their Internet and social media presences.

4. Use of cookies and associated functions/technologies

We sometimes use so-called cookies on our platform. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure and to enable the provision of certain functions. Cookies are small text files that are stored on your computer and saved by your browser. A cookie contains a characteristic string of characters that enables your browser to be uniquely identified when you return to the platform.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit or browser session (so-called transient cookies). Other cookies remain stored on your end device for a specified period of time or until you delete them (persistent cookies). These cookies enable us to recognize your browser on your next visit. We are happy to provide further information on the functional cookies used upon written request. Please use the contact details above.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser.

You can regularly obtain the procedure for deactivating cookies via the “Help” function of your Internet browser. If cookies are deactivated, the functionality and/or full availability of this platform may be restricted. For further cookie-specific setting and deactivation options, please also see the individual explanations below on the specific cookies and associated functions/technologies used when visiting our platform.

Some of the cookies we use on our platform come from third parties who help us to analyze the impact of our platform content and the interests of our visitors, to measure the performance of our platform or to place needs-based advertising and other content on our or other platforms. As part of our platform, we use both first party cookies (only visible from the domain you are currently visiting) and third party cookies (visible across domains and regularly set by third parties).

The cookie-based data processing is carried out on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR (legal basis) or on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR (legal basis) to safeguard our legitimate interests. Our legitimate interests lie in particular in being able to provide you with a technically optimized, user-friendly and needs-based platform and to ensure the security of our systems. You can revoke any consent you have given us at any time, e.g. by deactivating the cookie-based tools/plugins listed in detail in the following overview. By making the appropriate settings, you can also object to processing based on legitimate interests.

The following cookie-based tools/plugins are used on this platform:

Google Analytics

This platform uses the functions of Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on the basis of your consent given to us (Art. 6 para. 1 sentence 1 lit. a GDPR). You can give us your consent voluntarily by clicking on the corresponding button in the “cookie banner” when you visit our platform. Data is also regularly transmitted to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as part of the processing described below. Google Ireland Limited and Google LLC are hereinafter jointly referred to as “Google”. Google Analytics uses cookies (first-party cookies) that enable your use of the platform to be analyzed. However, this does not mean that we obtain direct knowledge of your identity. Google uses the information generated by the cookies on our behalf to evaluate the use of the platform, to compile reports on the platform activities and to provide us with further services associated with the use of the platform and the Internet. This enables us to improve the quality of our platform and its content. We learn how the platform is used on the basis of statistical analyses and can thus constantly optimize our offering.

The information generated by the Google Analytics cookies about your use of this platform (e.g. time, place and frequency of your website visit including IP address) is transmitted to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement (https://www.privacyshield.gov/eu-us-framework). We have set the storage period at Google for corresponding data at user and event level to 14 months (shortest possible setting option).

IP anonymization

We have activated the IP anonymization function on this platform. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA and thereby anonymized. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google’s own information, the IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data about you.

Browser plugin

You can prevent the storage of Google Analytics cookies by setting your browser software accordingly (see above). You can also prevent Google from collecting the data generated by the cookie and relating to your use of the platform (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection against data collection

Alternatively, you can activate/deactivate the collection of your data by Google Analytics, particularly on mobile devices, by clicking on the following link:

Deactivate Google Analytics

If deactivated, a cookie will be set that prevents your data from being collected on future visits to this platform.
Specifically, the following tracking cookies are used by Google Analytics: __utmz, __utma, __utmb, __utmc, __utmt.
More information on how Google Analytics handles user data and the security and data protection principles as well as setting and objection options can be found in Google’s data protection declaration, available via the following link: https://support.google.com/analytics/answer/6004245?hl=en.

5. Other processing purposes

Compliance with legal regulations: We also process your personal data in order to comply with other legal obligations that we may have in connection with our business activities. This includes, in particular, commercial, commercial or tax retention periods. We process your personal data in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR (legal basis) to fulfill a legal obligation to which we are subject.

Legal enforcement: We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent this is necessary to prevent or prosecute criminal offenses. We process your personal data to protect our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR (legal basis), insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offenses (legitimate interest ).

Consent: If you have given us your consent to process personal data for specific purposes (e.g. sending information materials and offers), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time.

Recipient of data

In order to find and commission suitable providers, we may pass on your data or information about the respective orders to the respective provider. This data processing is justified by the fact that (1) the processing is necessary for the fulfillment of the contract between you as the data subject and the provider in accordance with Article 6 Paragraph 1 Letter b) GDPR, or (2) we have a legitimate interest in ensuring the functionality and error-free operation of the platform, which outweighs your rights and interests in the protection of your personal data within the meaning of Article 6 Paragraph 1 Letter f) GDPR.

Otherwise, those departments within the platform operator’s company will have access to your data that need it to fulfill our contractual and legal obligations. Service providers and vicarious agents employed by us (e.g. technical service providers, shipping companies, waste disposal companies) may also receive data for these purposes. We limit the transfer of your personal data to what is necessary, taking into account data protection regulations. In some cases, the recipients receive your personal data as processors and are then strictly bound to our instructions when handling your personal data. In some cases, the recipients act independently and are responsible for their own data protection law and are also obliged to comply with the requirements of the GDPR and other data protection regulations.

Finally, in individual cases we transmit personal data to our advisors in legal or tax matters, whereby these recipients are obliged to maintain particular confidentiality and secrecy due to their professional status.

Data transfer to third countries

As part of the use of the above-mentioned tools, for example Google, we may transfer your IP address to third countries (see above). The data transfer is based on the EU Commission’s Implementing Decision (EU) 2016/1250 of July 12, 2016 in accordance with Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US Privacy Shield. Furthermore, we do not transfer your personal data to countries outside the EU or EEA or to international organizations, unless expressly stated otherwise in this data protection declaration.

Duration of data storage

We initially process and store your personal data for the period for which the respective purpose of use requires corresponding storage (see above for the individual processing purposes). This may also include the periods during which a contract is initiated (pre-contractual legal relationship) and when a contract is processed. On this basis, personal data will be regularly deleted as part of the fulfillment of our contractual and/or legal obligations, unless their further processing for a limited period of time is necessary for the following purposes:

Fulfillment of legal retention obligations, which arise, for example, from the Commercial Code (§§ 238, 257 Para. 4 HGB) and the Tax Code (§ 147 Para. 3, 4 AO). The periods specified there for storage and documentation are up to ten years.
Preservation of evidence taking into account the statute of limitations. According to Sections 194 ff. of the Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.

Data security

We protect personal data using appropriate technical and organizational measures to ensure an appropriate level of protection and to protect the personal rights of the persons concerned. The measures taken serve, among other things, to prevent unauthorized access to the technical facilities we use and to protect personal data from unauthorized access by third parties. In particular, this platform uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as your contact requests that you send to us as the platform operator. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. However, we would like to point out that data transmission over the Internet (e.g. when communicating via email) can have security gaps. Complete protection of the data from access by third parties is not possible.

Your rights as a data subject

Under the legal requirements, you are entitled to the following rights as a data subject:

Right to information: You are entitled at any time, within the scope of Article 15 GDPR, to request confirmation from us as to whether we are processing personal data concerning you; If this is the case, you are also entitled, within the framework of Art. 15 GDPR, to obtain information about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of an automated decision-making and, in the case of third country transfers, the appropriate guarantees) and to receive a copy of your data. The restrictions of Section 34 BDSG apply.
Right to rectification: In accordance with Art. 16 GDPR, you have the right to request that we correct the personal data stored about you if it is inaccurate or incorrect.
Right to deletion: You are entitled, under the conditions of Article 17 GDPR, to request that we delete personal data concerning you immediately. The right to deletion does not apply, among other things, if the processing of the personal data is necessary, for example, to fulfill a legal obligation (e.g. legal retention obligations) or to assert, exercise or defend legal claims. In addition, the restrictions of Section 35 BDSG apply.
Right to restrict processing: You have the right, under the conditions of Article 18 GDPR, to request that we restrict the processing of your personal data.
Right to data portability: Under the conditions of Art. 20 GDPR, you have the right to request that we provide you with the personal data concerning you that you have provided to us in a structured, common and machine-readable format.
Right of withdrawal: You can withdraw your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected. To declare your revocation, an informal message to us, for example by email, is sufficient.
Right to object: You have the right to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we have to stop processing your personal data. The right to object only exists within the limits provided for in Article 21 GDPR. In addition, our interests may conflict with the termination of processing, so that we are entitled to process your personal data despite your objection. We will take into account any objection to any direct marketing measures immediately and without further weighing up existing interests.
You also have the right to object at any time to the processing of your data based on Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR (data processing based on a balance of interests) or Article 6 Paragraph 1 Clause 1 Letter. e GDPR (data processing in the public interest) you can object if there are reasons for doing so that arise from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

The objection can be made informally and should, if possible, be addressed to e-mail kontakt@worldoffeet.de
Right to lodge a complaint with a supervisory authority: Under the conditions of Art. 77 GDPR, you have the right to lodge a complaint with a responsible supervisory authority. In particular, you can contact the state data protection authorities responsible for us in Baden-Württemberg or another responsible supervisory authority with a complaint.
Other concerns: Our data protection officer is available to answer any further data protection questions and concerns. Corresponding inquiries and the exercise of your above rights should, if possible, be sent in writing to our address given above or by email to kontakt@worldoffeet.de.

Obligation to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do this, we will not be able to provide you with our platform without restrictions or respond to your inquiries to us. Personal data that we do not necessarily need for the processing purposes mentioned above are marked as voluntary information.

Automated decision making/profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

Currentness and changes to this data protection declaration

This data protection declaration is currently valid and is dated January 5, 2024.
Due to the further development of our platform and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration.